Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/E07_Ifx3SYqr0ZkCl5_UWpx91po.roa
File: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (raw, json)
Hash identifier: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=
Subject key identifier: 13:4E:FF:21:FC:77:49:8A:AB:D1:99:02:97:9F:D4:5A:9C:7D:D6:9A
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 0194228D6A7DDBE27BDB6EAC4E51B9E18618
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/E07_Ifx3SYqr0ZkCl5_UWpx91po.roa
Signing time: Wed 01 Jan 2025 15:48:00 +0000
ROA not before: Wed 01 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 77.221.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6a:7d:db:e2:7b:db:6e:ac:4e:51:b9:e1:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134eff21fc77498aabd19902979fd45a9c7dd69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:ab:22:c9:2b:37:b6:34:02:fa:ff:4d:81:
4b:74:61:33:20:60:c8:91:be:45:11:a7:4a:e5:1f:
65:80:33:8f:98:15:74:57:45:7d:bf:cb:b0:5a:2f:
09:a0:82:ee:9a:de:b0:af:4a:52:39:37:5e:39:4d:
48:69:62:d1:1a:af:76:ce:7d:49:66:db:b2:8d:18:
46:5d:05:f9:b9:f1:ba:eb:be:5b:bc:10:e6:f9:d5:
bd:2d:e5:33:84:16:a4:23:a5:fc:fc:08:07:af:d6:
46:7b:f1:a8:bd:24:64:54:d0:28:e1:b5:0a:b2:7b:
4b:b4:df:33:d2:47:0b:58:dc:d1:4a:5c:b3:9c:5b:
55:ff:78:de:50:1c:ae:a7:e4:d6:69:27:4a:4d:d1:
d2:74:6c:0f:71:bb:8f:31:b2:83:91:fe:79:8c:1e:
c3:1b:c5:32:8f:20:ef:6a:36:87:e8:9d:8d:d8:0e:
90:19:1a:4c:31:42:e8:0d:58:ee:5b:ad:70:ac:c0:
f8:c1:13:3e:c2:10:f1:39:31:0a:e6:f6:66:43:8b:
e8:e6:b6:7d:7e:a1:50:b7:3b:8a:86:bf:9c:17:91:
61:dd:65:0f:00:6b:41:03:54:ea:02:62:07:81:36:
52:4e:e6:5b:44:aa:12:35:20:c5:8b:73:ca:c3:9a:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:FF:21:FC:77:49:8A:AB:D1:99:02:97:9F:D4:5A:9C:7D:D6:9A
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/E07_Ifx3SYqr0ZkCl5_UWpx91po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:05:b0:59:a6:c3:d9:a5:4d:c7:f9:59:38:38:75:7e:6c:e2:
8a:28:63:76:08:f8:12:aa:a3:70:0e:ba:70:58:b4:bf:32:0a:
b2:61:ba:ed:60:bf:da:12:29:0a:78:49:2e:ab:e1:da:e3:6e:
a1:ef:bc:53:bc:d3:6b:4c:66:49:83:a2:d1:00:1c:22:66:5b:
63:de:42:b7:76:22:4f:e5:60:8b:39:66:b3:00:72:23:fc:e5:
1e:6e:54:73:04:5a:4a:f9:34:93:72:15:cb:e3:36:50:1e:64:
53:8b:92:bc:3c:41:6c:0d:b4:76:ae:9a:3e:fe:cf:83:50:42:
4c:96:82:4c:2f:79:87:98:1b:05:51:3f:b9:96:1e:bb:c4:a0:
77:c3:20:f4:c6:e6:09:68:86:31:a7:4f:f7:3a:3a:bb:04:18:
fc:cf:d7:1c:eb:dc:64:22:38:7a:73:b9:f1:d0:aa:5e:6f:d2:
95:3e:b0:38:16:39:eb:58:a6:5b:5c:b5:5a:1c:56:c7:28:57:
b6:3a:5d:4a:b4:18:4d:24:1a:0b:c5:ff:f3:83:61:52:2f:57:
ef:10:48:31:4b:33:f4:79:e3:e6:61:09:f3:1c:84:90:2f:73:
b1:20:5e:8d:8b:0e:03:16:7d:45:b8:33:f8:ed:3c:5b:3e:e3:
80:4b:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:07 2025 by rpki-client